Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File:                     58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier:          AxPyGjP+3WWSEHV1fp1DWW39wLkexpSssn+Lz1//MjY=
Subject key identifier:   65:FB:27:D8:50:83:54:7F:7D:CF:04:3D:D7:C3:2C:6F:30:F4:0B:A3
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       019A522C94716DA02C1386DDFB25B532BD8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number:          0BC8
Signing time:             Wed 05 Nov 2025 04:00:44 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:44 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:44 +0000
Files and hashes:         1: 3pxtcoitrFP84ablFN0e1N99UbU.roa (hash: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=)
                          2: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: JOOjfaLFXC6nMI93HqFj/cUBFnAWRhokeOokbaek6Lw=)
                          3: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=)
                          4: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=)
                          5: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=)
                          6: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=)
                          7: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=)
                          8: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=)
                          9: xDf42bpWqRCsDPxTubWSXNuBqFg.roa (hash: YkhsAjaT83vQpIvIVaLxfqKkzhztD+nQzU/2yzJtmvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:94:71:6d:a0:2c:13:86:dd:fb:25:b5:32:bd:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Nov  5 04:00:44 2025 GMT
            Not After : Nov  6 04:00:44 2025 GMT
        Subject: CN=65fb27d85083547f7dcf043dd7c32c6f30f40ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:61:b1:50:2c:58:a9:33:99:ac:df:9e:9c:
                    0a:79:84:fd:17:5e:61:bc:c9:a7:fd:c0:b1:fd:16:
                    5e:a7:8f:75:07:76:81:35:e9:79:74:80:73:89:84:
                    55:3e:c5:84:a6:68:36:ee:95:94:19:ae:bc:dd:a6:
                    db:8a:a7:c5:7c:29:90:5a:2a:d2:60:80:60:b2:09:
                    8b:fc:bf:43:78:9e:aa:b3:f7:72:4b:89:db:52:f4:
                    c6:e5:0d:21:c2:78:3e:18:85:20:77:e3:50:1c:d4:
                    fb:24:52:1a:e5:79:96:02:eb:f2:a2:d4:14:ed:39:
                    17:19:11:bd:e1:2c:e5:1d:66:77:29:c9:8f:27:a6:
                    f9:5d:ab:46:a3:d8:f5:1f:94:08:a6:5c:83:80:63:
                    79:df:ac:0b:4d:d5:da:cd:0c:94:a1:3e:0d:39:38:
                    68:97:71:e9:8a:66:75:bb:2d:7d:b0:e1:0a:02:91:
                    59:ba:7a:c1:0d:cd:fe:e4:0f:19:58:32:9a:e7:7d:
                    90:65:26:2c:99:df:0e:ec:12:64:b2:14:dd:a9:a6:
                    e3:19:71:94:6a:2a:53:50:5d:91:44:8f:f4:2a:81:
                    b5:47:52:8a:5d:8a:65:c0:c7:66:e4:64:ea:c2:4c:
                    b9:c4:63:79:4a:60:bf:72:3b:f5:c5:9b:89:11:b4:
                    a2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FB:27:D8:50:83:54:7F:7D:CF:04:3D:D7:C3:2C:6F:30:F4:0B:A3
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e8:a8:32:0a:0f:8d:16:df:9f:80:4f:d7:4e:d5:52:99:79:
         47:8b:5d:28:b3:db:8e:87:00:e8:e3:5d:3a:e2:6c:8e:1f:bc:
         ce:d8:71:8b:fb:3a:0f:ba:de:43:44:c8:d3:35:29:18:ce:77:
         77:74:1f:b4:df:4e:42:62:3d:50:b0:10:2a:50:b3:49:b4:1a:
         00:b5:ae:59:6d:f5:fd:d9:95:da:f0:60:a5:40:4b:76:48:b4:
         b6:b7:ea:0f:2f:4e:f5:51:d8:37:9f:36:ec:8b:d6:bd:3c:c7:
         a9:4e:08:b6:1c:54:77:20:ce:67:78:b9:d0:1d:06:fb:b1:19:
         82:e9:b0:2a:08:78:e0:81:5d:f4:76:49:86:08:a1:9e:ff:21:
         63:54:7a:a9:58:0f:a7:f3:50:d0:16:d1:f9:aa:a2:db:13:c0:
         a0:2e:e1:15:09:82:16:72:20:14:02:41:76:26:f8:bb:b7:d9:
         a4:22:2a:40:5a:33:1d:69:b9:5c:13:61:56:99:ef:1d:6e:2e:
         bf:50:41:6e:c2:41:62:28:f0:59:57:0e:04:34:2e:08:4e:90:
         b0:34:12:d4:a0:59:c0:6e:16:9a:4a:c6:75:a6:3c:ac:6a:14:
         9b:e6:fd:ad:df:b1:24:70:68:16:67:8e:f8:0b:2c:39:fb:5d:
         51:e2:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:27 2025 by rpki-client